{"id":"CVE-2026-61845","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-61845","summary":"Crass : Large numeric exponents cause CPU and memory denial of service","details":"### Impact\n\nCrass converts CSS scientific notation number values with unbounded exponentiation before it clamps the result to `Float::MAX`. Applications that use Crass to parse attacker-controlled CSS strings can be forced to spend disproportionate CPU and memory parsing a tiny input, possibly resulting in a crash.\n\n### Patches\n\nThis is fixed in Crass 1.0.7.\n\n### Related\n\n- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/crass/GHSA-6wmf-3r64-vcwv.yml","published":"2026-10-20T14:32:39Z","modified":"2026-10-20T14:45:03.938633122Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"RubyGems","name":"crass","fixedVersion":"1.0.7"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/rgrove/crass/security/advisories/GHSA-6wmf-3r64-vcwv"},{"type":"PACKAGE","url":"https://github.com/rgrove/crass"},{"type":"WEB","url":"https://github.com/rgrove/crass/releases/tag/v1.0.7"},{"type":"WEB","url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/crass/GHSA-6wmf-3r64-vcwv.yml"},{"type":"WEB","url":"https://rubygems.org/gems/crass/versions/1.0.7"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-20T14:45:03.938633122Z"}}